From 1c0fdf2309fec2c1734cffdf5cdfd8f15c99cbff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vladim=C3=ADr=20=C4=8Cun=C3=A1t?= <vcunat@gmail.com>
Date: Sat, 2 Nov 2013 12:59:47 +0100
Subject: [PATCH] polkit WIP: enable forgotten config for NetworkManager

and only authorize "active" sessions.
---
 nixos/modules/services/networking/networkmanager.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/nixos/modules/services/networking/networkmanager.nix b/nixos/modules/services/networking/networkmanager.nix
index 1ed4e20b9a5..2e8d17d872d 100644
--- a/nixos/modules/services/networking/networkmanager.nix
+++ b/nixos/modules/services/networking/networkmanager.nix
@@ -40,10 +40,11 @@ let
     polkit.addRule(function(action, subject) {
       if (
         subject.isInGroup("networkmanager")
+        && subject.active
         && (action.id.indexOf("org.freedesktop.NetworkManager.") == 0
             || action.id.indexOf("org.freedesktop.ModemManager.")  == 0
         ))
-          { return polkit.Result.YES; } #TODO: active/inactive
+          { return polkit.Result.YES; }
     });
   '';
 
@@ -189,8 +190,7 @@ in {
       systemctl restart NetworkManager
     '';
 
-    #TODO
-    #security.polkit.permissions = polkitConf;
+    security.polkit.extraConfig = polkitConf;
 
     # openvpn plugin has only dbus interface
     services.dbus.packages = cfg.packages ++ [